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DETAILED ACTION 

1 . The office action is in replay to an amendment filed on 08/25/2008. Claims 1-25 
are pending. 

Response to Arguments 

2. Applicant's arguments with respect to claims 1-25 have been considered but are 
moot in view of the new ground(s) of rejection. 

Claim Rejections - 35 USC § 103 

3. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

4. Claims 1-6,8-18,20-25 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Karaoguz(US Pub No 2004/0059914 Al) in view of Mekenzie et al(hereinafter 
referred as Mekenzie) US Pub No 2002/0141594 and further inview of Niimura et al 
(hereinafter referred as Niimura) US Patent No 7,420,596 B2 . 

5. As per claims 1,14,22: Karaoguz discloses an apparatus/method/article, 
comprising: an authentication device that authenticates a computing device (See 0041 
0049), in communication with the authentication device, through employment of a 
determination that a current location of the authentication device matches an initial 
location of the authentication device (See Fig 3 steps 305,310,335 and Fig 4 steps 440 
and 0019). 
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Karaoguz does not explicitly teach wherein one or more private keys employable 
for encryption and/or decryption of information are erased upon an attempt to move the 
authentication device. However Mackenzie teaches wherein one or more private keys 
employable for encryption and/or decryption of information are erased upon an attempt to 
move the authentication device (See col 4 lines 44-47 and col 12 lines 6-16) 

Therefore it would have been obvious to one having ordinary skill in the art at 
that time the invention was made to modify the teaching method of Mackenzie within 
Karouguz method inorder to provides techniques to render the private key of a networked 
device invulnerable to offline dictionary attacks, even if the devices captured(See 
MacKenzie 0034). 

The combination of Mackenzie and Karouguz do not explicitly teach information 
are erased via a cutoff power. 

However Niimura teaches information are erased via a cutoff power (See Fig 3 
step S303,S304 and col 4 lines 21-25) 

Therefore it would have been obvious to one having ordinary skill in the art at 
that time the invention was made to modify the teaching method of Niimura within 
Mackenzie and Karouguz method inorder to prevent a leak of the key data (See Niimura 
col 4 lines 24-25). 

6. As per claim 2: the combinations of Karaoguz-Mackenzie-Niimura teach the 
apparatus wherein the computing device comprises a first computing device wherein the 
authentication device makes the determination that the current location of the 
authentication device matches the initial location of the authentication device in response 
to a request from a second computing device for authentication of the first computing 
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device for a data transfer from the second computing device to the first computing device 
(See Karaoguz 0008,0019-0020). 

7 . As per claims 3 , 1 5 : the combinations of Karaoguz-Mackenzie-Niimura teach the 
apparatus/method wherein the request from the second computing device comprises an 
authentication challenge string (See Karaoguz 0038,0041); wherein the authentication 
device stores one or more private keys, wherein if the current location of the 
authentication device matches the initial location of the authentication device, then the 
authentication device employs one or more of the one or more private keys to decrypt the 
authentication challenge string into an authentication challenge response(See Karaoguz 
0038). 

8 . As per claims 4, 1 6 : the combinations of Karaoguz-Mackenzie-Niimura teach the 
apparatus/method wherein the authentication device sends the authentication challenge 
response to the second computing device, wherein the second computing device analyzes 
the authentication challenge response to determine whether the first computing device is 
authenticated for the data transfer (See Karaoguz 0037-0038). 

9. As per claims 5,17: the combinations of Karaoguz-Mackenzie-Niimura teach the 
apparatus/method wherein the second computing device comprises an authentication 
challenge key to compare with the authentication challenge response received from the 
authentication device (See Karaoguz 0038,0041); wherein if the authentication challenge 
response matches the authentication challenge key, then the authentication challenge 
response represents that the first computing device is authenticated and the data transfer 
can be sent from the second computing device to the first computing device(See 
Karaoguz Fig 4 step 440 and 0038,0041). 



Application/Control Number: 10/803,718 Page 5 

Art Unit: 2436 

10. As per claims 6,18: the combinations of Karaoguz-Mackenzie-Niimura teach the 
apparatus wherein upon determination that the current location of the authentication 
device does not match the initial location of the authentication device, the authentication 
device prevents authentication of the first computing device and disables the one or more 
private keys (See Karaoguz Fig 4 step 450 and 0042). 

11. As per claim 8,20: the combinations of Karaoguz-Mackenzie-Niimura teach the 
apparatus/method wherein the authentication device comprises a base portion, a cover 
portion, and one or more electronic components that serve to authenticate the computing 
device; wherein the base portion is fixed to a surface near the computing device, wherein 
the cover portion is fixed to the base portion to provide a secure shell for the one or more 
electronic components (See Karaoguz Figs 2,3 and 0017,0050). 

12. As per claim 9,21 : the combinations of Karaoguz-Mackenzie-Niimura teach the 
apparatus/method wherein a first one of the base and cover portions receives electricity 
through a power port, wherein a second one of the base and cover portions receives 
electricity through an electrical contact with the first one of the base and cover 
portions(See Fig 5 step 5 15,525); wherein upon separation of the second one of the base 
and cover portions from the first one of the base and cover portions, the second one of the 
base and cover portions loses power and prevents authentication of the computing 
device(See Karaoguz Fig 5 step 515,525). 

13. As per claim 10: the combinations of Karaoguz-Mackenzie-Niimura teach 
wherein the second one of the base and cover portions electrically supports one or more 
of the one or more electronic components that store one or more private keys, wherein the 
authentication device employs one or more of the one or more private keys to 
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authenticate the computing device (See Karaoguz Fig 5 step 515,525); wherein a loss of 
power in the second one of the base and cover portions erases the one or more private 
keys from the one or more of the one or more electronic components(See Karaoguz Fig 5 
step 515,525). 

14. As per claim 1 1 : the combinations of Karaoguz-Mackenzie-Niimura teach the 
apparatus wherein the authentication device comprises a location sensor (See 0039); 
wherein upon initialization of the authentication device, the location sensor sets the initial 
location of the authentication device (See Karaoguz 0039,0045); wherein the location 
sensor determines the current location of the authentication device, wherein the 
authentication device compares the current location with the initial location to 
authenticate the computing device (See Karaoguz 0039,0045). 

15. As per claim 12: the combinations of Karaoguz-Mackenzie-Niimura teach the 
apparatus wherein the location sensor comprises a global positioning system component, 
wherein the global positioning system component measures the initial location and the 
current location of the authentication device as a three-dimensional location of latitude, 
longitude, and altitude (See Karaoguz 0045-0046). 

16. As per claim 13: the combinations of Karaoguz-Mackenzie-Niimura teach the 
apparatus wherein the authentication device allows authentication of the computing 
device upon the determination that the authentication device matches the initial location 
of the authentication device within a specified error message (See Karaoguz 0039,0045) 

17. As per claim 23: the combination of Karaoguz-Mackenzie-Niimura teach the 
apparatus wherein the one or more private keys are erased upon an attempt of open the 
authentication device (See Mackenzie col 4 lines 44-47 and col 12 lines 6-16) 
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18. As per claim 24: the combination of Karaoguz-Mackenzie-Niimura teach the 
apparatus wherein the one or more private keys are erased via a cutoff of power upon the 
attempt to move the authentication device (See Mackenzie col 4 lines 44-47 and col 12 
lines 6-16 and See Niimura Fig 3 step S303,S304 and col 4 lines 21-25). 

19. As per claim 25 : the combination of Karaoguz-Mackenzie-Niimura teach wherein 
the one or more private keys are erased via a cutoff of power upon an attempt to open the 
authentication device (See Maruta See Fig 10 steps S71 (automatic power off) and col 4 
lines 28-36) 

20. Claims 7,19 is rejected under 35 U.S.C. 103(a) as being unpatentable over 
Karaoguz(US Pub No 2004/0059914 Al) in view of Mekenzie et al(hereinafter referred 
as Mekenzie) US Pub No 2002/0141594 and further inview of Niimura et al (hereinafter 
referred as Niimura) US Patent No 7,420,596 B2 and furthermore inview of Wheeler et 
al(US Pub No 2007/0088950 Al. 

21. As per claims 7,19: the combination of Karaoguz-Mackenzie-Niimura teaches 
claims 6 and 15 as recited above. Karaoguz-Mackenzie-Niimura do not explicitly teach 
the apparatus wherein the authentication device stores the one or more private keys in 
volatile memory, wherein upon determination that the current location of the 
authentication device does not match the initial location of the authentication device, the 
authentication device cuts off power to the volatile memory to erase the one or more 
private keys. 

However Wheeler the apparatus wherein the authentication device stores the one 
or more private keys in volatile memory, wherein upon determination that the current 
location of the authentication device does not match the initial location of the 
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authentication device, the authentication device cuts off power to the volatile memory to 
erase the one or more private keys(See 0146). 

Therefore it would have been obvious to one ordinary skill in art at that time the 
invention was made to modify the teaching method of Wheeler within Karaoguz- 
Mackenzie-Niimura method inorder to enhance security of the system. 

Conclusion 

22. The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. See PTO 892 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Fikremariam Yalew whose telephone number is 
5712723852. The examiner can normally be reached on 9-5. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Moazzami Nasser can be reached on 571-272-4195. The fax phone number 
for the organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. Status 
information for unpublished applications is available through Private PAIR only. For 
more information about the PAIR system, see http://pair-direct.uspto.gov. Should you 
have questions on access to the Private PAIR system, contact the Electronic Business 
Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a USPTO 
Customer Service Representative or access to the automated information system, call 
800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

Fikremariam Yalew 

12/02/2008 /Carl Colin/ 

FA Primary Examiner, Art Unit 2436 

Art Unit 2436 



